Slow rate Denial of Service (DoS) attacks have been shown to be a very effective way of attacking vulnerable servers while using few resources. This thesis investigates the effectiveness of mitigation tools used for protection against slow DoS attacks, specifically slowheader and slow body. Finally, we propose a service that cloud providers could implement to ensure better protection against slow rate DoS attacks. The tools studied in this thesis are, a Web Application firewall, a reverse proxy using an event-based architecture and Amazon’s Elastic Load Balancing. To gather data a realistic HTTP load script was built that simulated load on the server while using probe requests to gather response time data from the server. The script recorded the impact the attacks had for each server configuration.The results show that it’s hard to protect against slow rate DoS attacks while only using firewalls or load balancers. We found that using a reverse proxy with an event-based architecture was the best way to protect against slow rate DoS attacks and that such a service would allow the customer to use their server of choice while also being protected.

This master thesis focuses on the issue of automation of virtual infrastructure and available tools such as Ansible, Terraform and Puppet. The individual tools are compared here in sequence for installations or configuration creation. The result of this semester thesis is the selection of a suitable tool for automation of virtual infrastructure.

The Web Based Audio Editor thesis deals with the requirements specification, selection of technologies and with the implementation itself. The thesis uses modern approaches of HTML5 standards and is divided into the client and the server parts. Both the web application and the server are implemented in JavaScript. The Web based audio editor allows basic editing features like cut, shifting, deleting. All this in multiple audio tracks. The application runs in recent versions of the most widely used web browsers.